$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft File: E6782977133FCE90213CEBEC30761D98F47C2F41.mft (raw, json) Hash identifier: xMTQl6iPBWmw+U6hKKKLUvTL3J7AQZ8PbdYYy46w1S0= Subject key identifier: F5:AE:5A:E6:64:4C:81:73:F0:7B:3B:6D:C9:55:CF:89:2E:EE:07:90 Authority key identifier: E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41 Certificate issuer: /CN=E6782977133FCE90213CEBEC30761D98F47C2F41 Certificate serial: 1D2086BE5A9DC86CE4FBA04F5C0F009A60BBCD12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:14:17 +0000 Manifest this update: Mon 21 Sep 2026 02:09:17 +0000 Manifest next update: Tue 22 Sep 2026 02:29:17 +0000 Files and hashes: 1: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: bESj5Nb0cN33a7g1XWz+UbX4GF5PV+yGORqTT/G1JCk=) 2: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: usoIWcd8Xh8Y5o5mz4Th6snOG36cNVkHpCLTqZ4OQbk=) 3: E6782977133FCE90213CEBEC30761D98F47C2F41.crl (hash: YRt0OmwHqxakCrC13aqVDrFWGMNYU+UI1SD50fH2pt8=) 4: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: AzwawxbCEg5H+zE23E5y6RqY3/0LQRvHyDvmDqo+Klw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:20:86:be:5a:9d:c8:6c:e4:fb:a0:4f:5c:0f:00:9a:60:bb:cd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6782977133FCE90213CEBEC30761D98F47C2F41 Validity Not Before: Sep 21 02:09:17 2026 GMT Not After : Sep 22 02:29:17 2026 GMT Subject: CN=F5AE5AE6644C8173F07B3B6DC955CF892EEE0790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:80:fb:97:af:64:84:55:41:3d:3d:cc:9a: 20:6d:52:c9:bc:73:8c:84:e3:f4:15:40:b6:d6:82: 9b:93:41:1a:3e:f2:a1:80:11:23:b2:10:66:a4:68: 83:62:7d:28:e6:0c:48:5e:88:af:7f:f9:01:b0:8e: 2c:e1:a6:f0:92:23:37:f2:34:a6:5b:00:a4:03:1a: 04:d0:33:5c:69:85:f6:f3:36:de:89:26:8e:83:af: bc:a7:51:8a:f3:da:4e:41:e7:0c:2b:33:2b:cf:6f: 06:d3:e3:c0:22:b7:37:d4:f6:90:53:27:27:79:20: cb:37:15:b9:89:33:37:ca:e7:09:d6:18:b3:ef:b1: 5f:af:98:45:4f:04:e3:f3:7a:36:ee:d2:50:42:e7: 92:fd:82:03:a0:4f:e5:a4:8e:6b:aa:6a:1a:fb:21: 24:82:29:7a:6b:90:69:63:68:c0:28:4a:97:9a:67: 88:9d:64:cc:e2:2f:08:0b:fb:67:a5:c3:2f:ac:fb: 0c:76:5c:b0:c9:99:71:fe:cc:d4:26:ff:26:70:24: c1:70:2e:14:58:1d:6f:e4:4c:65:42:9b:0c:57:90: c4:38:d9:49:ea:51:12:aa:0b:10:4e:fd:d6:42:ca: 87:6a:c1:c0:b2:a2:50:8d:4f:28:97:f4:a4:d6:6d: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AE:5A:E6:64:4C:81:73:F0:7B:3B:6D:C9:55:CF:89:2E:EE:07:90 X509v3 Authority Key Identifier: keyid:E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:58:c1:07:26:6a:03:bb:76:6e:4a:6f:b6:b5:5c:2c:17:e5: 72:ac:ab:be:d0:fd:3b:82:eb:dd:db:04:4e:97:94:25:33:f8: 9d:20:56:8e:15:03:f6:68:2d:10:55:47:97:f2:48:d5:4f:7b: 33:8f:00:f6:c0:91:f2:77:89:1b:b8:cb:5b:59:00:7f:e2:59: 92:b6:18:1b:ac:03:24:6c:16:79:de:33:49:6d:b4:01:73:3b: 3f:72:f2:c2:d4:4e:b4:f7:04:d6:80:cf:fc:e9:dd:71:e9:b2: 47:06:5f:da:1c:09:5f:e2:7a:2c:8e:51:00:02:04:2f:2b:81: 07:20:5d:59:cd:e5:65:b3:33:7b:b8:e9:05:bc:08:92:db:03: 39:6c:d8:80:de:a6:b8:1d:f2:be:a0:06:b8:8f:5d:e2:ee:e6: a6:c4:cd:3a:a2:3b:76:2e:8b:ce:fd:eb:de:1b:f4:b8:6a:7e: f4:c2:cc:df:ae:63:f3:3e:2f:d4:2a:f8:a7:74:8c:86:7c:be: 1c:95:3f:b9:7f:8e:c2:14:23:d9:a0:f0:55:bb:7a:dd:c4:af: 46:2c:4c:1c:52:fb:be:2d:97:10:1e:ab:5a:02:ee:14:44:ed: 5c:3a:25:1c:3c:61:fb:73:ad:bc:7d:45:8b:24:c9:52:e2:cb: 39:55:c7:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSCGvlqdyGzk+6BPXA8AmmC7zRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY3ODI5NzcxMzNGQ0U5MDIxM0NFQkVDMzA3NjFEOThG NDdDMkY0MTAeFw0yNjA5MjEwMjA5MTdaFw0yNjA5MjIwMjI5MTdaMDMxMTAvBgNV BAMTKEY1QUU1QUU2NjQ0QzgxNzNGMDdCM0I2REM5NTVDRjg5MkVFRTA3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYID7l69khFVBPT3MmiBtUsm8 c4yE4/QVQLbWgpuTQRo+8qGAESOyEGakaINifSjmDEheiK9/+QGwjizhpvCSIzfy NKZbAKQDGgTQM1xphfbzNt6JJo6Dr7ynUYrz2k5B5wwrMyvPbwbT48AitzfU9pBT Jyd5IMs3FbmJMzfK5wnWGLPvsV+vmEVPBOPzejbu0lBC55L9ggOgT+Wkjmuqahr7 ISSCKXprkGljaMAoSpeaZ4idZMziLwgL+2elwy+s+wx2XLDJmXH+zNQm/yZwJMFw LhRYHW/kTGVCmwxXkMQ42UnqURKqCxBO/dZCyodqwcCyolCNTyiX9KTWbY/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9a5a5mRMgXPwezttyVXPiS7uB5AwHwYDVR0j BBgwFoAU5ngpdxM/zpAhPOvsMHYdmPR8L0EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNThkZGEtMGZmMS00ZjZhLWJiNjYtNjBmNGNhMDRjNDkwLzAvRTY3ODI5Nzcx MzNGQ0U5MDIxM0NFQkVDMzA3NjFEOThGNDdDMkY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNjc4Mjk3NzEzM0ZDRTkwMjEzQ0VCRUMzMDc2MUQ5OEY0N0My RjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvRTY3ODI5NzcxMzNGQ0U5MDIxM0NFQkVDMzA3NjFE OThGNDdDMkY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFYwQcmagO7dm5Kb7a1XCwX5XKsq77Q/TuC 693bBE6XlCUz+J0gVo4VA/ZoLRBVR5fySNVPezOPAPbAkfJ3iRu4y1tZAH/iWZK2 GBusAyRsFnneM0lttAFzOz9y8sLUTrT3BNaAz/zp3XHpskcGX9ocCV/ieiyOUQAC BC8rgQcgXVnN5WWzM3u46QW8CJLbAzls2IDeprgd8r6gBriPXeLu5qbEzTqiO3Yu i879694b9LhqfvTCzN+uY/M+L9Qq+Kd0jIZ8vhyVP7l/jsIUI9mg8FW7et3Er0Ys TBxS+74tlxAeq1oC7hRE7Vw6JRw8Yftzrbx9RYskyVLiyzlVx20= -----END CERTIFICATE-----Generated at Mon Sep 21 14:28:15 2026 by rpki-client